Privacy Policy

When you use Suriplace we collect:

• Account data: email address, name, region, profile picture and language preference.
• Profile content you share yourself: reviews, messages, events, tours and business information.
• Usage data: which content you view, check-ins, favourites and notification preferences.
• Device data: push token, device type and app version.
• Location only when you explicitly share it (e.g. for region filtering).
• Payment data: transaction references processed via the App Store, Google Play and RevenueCat. We do not store card details.

• To manage your account and profile.
• To show relevant content, events and businesses for your region.
• To deliver your messages, notifications and support replies.
• To detect abuse, fraud and spam.
• To comply with legal record-keeping (transaction history retained for 7 years).

We never sell your data. We only share what is necessary with processors that operate under our instructions:

• Supabase (database and authentication hosting).
• RevenueCat and Apple/Google (subscription management).
• Expo Push (notifications).
• Resend (email delivery).
• Sentry (error reports from the app; a user id and a location derived from your IP address are retained, no email address).
• Replit (hosting of our web pages; sees your IP address on every visit).
• Cloudflare (website visitor statistics).

We do not transfer data to countries outside the EEA without adequate safeguards.

We keep your data for as long as you have an account. Transaction data is retained for 7 years (legal obligation). After you delete your account all other personal data is permanently erased. The website measurements under section 10 are not linked to an account and fall outside this.

You have the right to access, correct, restrict or delete your data. You also have the right to data portability and to object to certain processing. For complaints contact us or the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

You can delete your account at any time from the app: Profile → Settings → Delete account. You will no longer receive notifications and your personal content will be permanently deleted. Transaction data is retained as described in section 4.

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage and role-based access controls.

If we update this policy we will publish the revised version on this page and update the date at the top.

Questions about your privacy or your rights? Contact info@suriplace.com.

A few things apply only to the website, because you can visit it without an account.

Cookies. The website places no advertising or analytics cookies. The only cookie is sp_lang, which remembers whether you want the Dutch or the English version. It is set only when you press the language button yourself.

Visitor numbers. We count how many people visit the website and which pages are read, using Cloudflare Web Analytics. Nothing is stored on your device and nothing is read from it. Cloudflare does see your IP address in the process. Visitors are not recognised, not even between two pages, so we cannot count people and cannot follow anyone across the site.

Clicks to the App Store, Google Play and WhatsApp. If you click a download button or the WhatsApp button we record that click, so we know how many people look for the app or get in touch, and from which page. To avoid counting the same visitor twice we derive an encrypted value from your IP address and your browser details. That value changes every day and cannot be traced back to you or to your IP address. Nothing is stored on your device for this.

Legal basis. The basis for both measurements is our legitimate interest: knowing whether the website works and how many people use it. Because we do not recognise visitors we cannot link this data to a person, so we cannot act on a request for access or erasure for this data.